Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: hcLO7X75ZzI14OfHcEwDRK8zQmdKQm+mbtvT70przVk=
Subject key identifier: BA:0F:76:C5:56:1C:2F:F6:72:97:67:54:23:98:53:2B:2C:F6:14:48
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 019A71B78C9701916A1E2F9348F1F1DF6093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0CF9
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: vUkXDepOpGE2yJfHcxQlYPhuoVGvMtAcdxwtvKiRfJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8c:97:01:91:6a:1e:2f:93:48:f1:f1:df:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=ba0f76c5561c2ff6729767542398532b2cf61448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:2c:e5:56:ec:1a:0b:6a:29:12:a3:13:66:
08:67:6e:bb:5d:32:97:04:2e:6a:1c:fd:fb:95:26:
f5:71:d5:55:bb:5c:3e:c0:b8:c9:71:75:54:ab:de:
4c:60:e2:cf:f6:0f:47:81:f1:b8:bc:4e:99:55:81:
64:d4:9c:71:8f:de:27:87:71:2e:9b:6a:3e:fb:d8:
bd:3a:11:6e:11:aa:ac:57:a3:78:1e:63:e8:33:d6:
89:3f:30:28:9b:2a:45:61:ba:82:ff:28:45:8e:33:
4a:a7:cf:26:83:a5:dc:92:ed:f1:c7:95:45:8c:d3:
9e:3b:f4:f3:30:5c:d3:b2:41:c8:06:1e:91:a3:23:
32:35:32:79:69:c3:85:9c:ac:3c:55:d9:4b:52:a0:
61:71:aa:a4:58:84:9e:b2:20:d1:97:14:1f:4e:6d:
04:6c:8e:63:b6:13:d8:b0:3b:41:7e:72:8b:da:1f:
72:0c:96:30:aa:07:e0:d9:8e:d3:28:01:c6:4a:98:
eb:02:57:b2:1f:b6:31:f3:b0:5b:6b:b2:68:f4:a1:
19:af:23:5b:58:9a:21:44:ee:31:08:a1:0c:bb:24:
06:43:3d:de:e8:03:1a:14:fe:3d:2b:38:59:18:da:
5a:6a:15:19:9c:c6:06:4a:b9:fe:06:e4:79:17:6b:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:76:C5:56:1C:2F:F6:72:97:67:54:23:98:53:2B:2C:F6:14:48
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d8:a8:f3:79:e0:e3:81:45:1d:69:f2:48:f0:8d:ae:79:10:
aa:e3:56:c9:ce:cc:c1:1d:b6:1e:d0:60:25:13:b2:4e:e8:11:
f4:12:76:88:13:1c:c0:2d:9a:b4:28:bc:76:c8:66:4c:56:67:
17:9b:c8:cf:db:b2:c5:70:2e:99:c8:6a:f2:80:16:19:13:c3:
19:89:1d:90:0f:b3:a4:22:3d:22:f4:de:ca:ee:40:ab:ad:7a:
dc:41:1c:93:82:0b:8e:83:27:d2:d0:2c:4f:57:50:24:4a:86:
48:67:99:90:49:52:c1:00:30:53:ae:41:4b:5a:99:7d:95:a2:
97:f0:ac:2e:ed:09:05:02:e9:86:50:0f:bd:df:2e:03:e3:b4:
f2:e4:f7:11:38:48:b8:14:75:01:4b:6d:56:95:52:c8:2d:e9:
e9:bb:51:e1:a6:b9:25:37:f6:7e:c7:b1:48:db:cc:11:82:be:
49:20:fe:8f:c8:b5:1c:78:9a:14:09:6f:2d:02:2f:72:f0:d0:
39:51:2c:d7:19:64:b0:0c:b5:72:ff:e2:6c:29:b0:ad:d5:cf:
f3:cd:00:65:19:69:67:a0:c0:61:84:c4:78:a9:5b:88:6b:20:
40:b3:2c:e0:b6:1c:3a:77:1b:5f:7b:41:1f:75:26:98:df:f8:
71:96:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:19 2025 by rpki-client